Configure bastion host integration
Choose how P0 connects to your Azure VMs — through an Azure Bastion host or a custom jump host — to enable secure SSH access.
Last updated
Choose how P0 connects to your Azure VMs — through an Azure Bastion host or a custom jump host — to enable secure SSH access.
Once you configure IAM management, you can enable secure SSH access to VMs in your Azure environment. This requires two parts:
Bastion host configuration under the Azure integration (this page and its subpages)
SSH access setup under Integrations → SSH
When you configure the component, you choose how P0 connects to your virtual machines (VMs) to provision access. You select the connection type per subscription when you add the subscription.
Complete IAM management before starting this step. The Bastion host configuration depends on the IAM permissions set up in the previous step.
P0 supports two ways to reach your VMs. Each has its own requirements, permissions, and setup steps, covered on its own page.
P0 provisions SSH access through a managed Azure Bastion host.
Yes — P0 creates and holds the role
P0 connects through a virtual machine behind a virtual network that acts as a jump host.
Yes — you grant a role to connecting users
Choose Azure bastion host when you already run an Azure Bastion host, or want P0 to manage SSH sessions through Azure's managed Bastion service.
Choose Custom jump host when you route SSH through your own VM behind a virtual network and want your users to connect over Azure IAM.
P0 installs Bastion host configuration per subscription. Each subscription that needs SSH access must have the component configured. When you add a subscription, you select how P0 connects: through an Azure bastion host or through a custom jump host.
In the Azure integration on p0.app, select Bastion Host.

Click Add subscription.

Select a subscription. Only subscriptions with IAM management already installed appear in this list.

Select how P0 connects to your VMs, then complete the setup steps for that connection type:
Proceed to Install SSH access control to connect P0 to your Azure VMs.
Last updated